When transferring accounts to new servers we occasionally get the message about old mysql passwords being in an insecure format. It's easy enough to reset them. However we just got that message on an account that doesn't have a database (at least not a database we set up). I figure cpanel might set up a db for its internal use? What should be the password for that database user. It lists the user as the exact same string as the account username (the first 8 without any _XXXX). Is the password supposed to be the same as the account password always?